Package Health/liquidrazor/transport-contracts

liquidrazor/transport-contracts

The package has a clear README, tests, a license, and an organization-owned repository. Its tiny dependency surface and matching repository support adoption, but there is little evidence yet of sustained maintenance or security process.

Latest v0.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published 134 days ago, so there is limited evidence of an established release cadence. The repository and package documentation provide some transparency, but do not demonstrate ongoing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern for a package whose only release is already 134 days old.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a process gap rather than evidence of unsafe code, and the package's tests and minimal dependency surface provide some compensation.

Security policy

The repository has no security policy, leaving disclosure and response expectations undocumented. This lowers transparency, though the package is a small contract library with no lifecycle scripts.

Version stability

Version v0.1.0 indicates an early API and limited maturity, although it is not marked as a prerelease. The package's focused contracts and tests partly reduce adoption risk.